Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
File:                     af56c26b-429b-351b-b947-c8b53bdd868c.roa (raw, json)
Hash identifier:          R8l7KsuQ17CSFVhyvNiyzsELq8AdsLvPbm9tBNBay4A=
Subject key identifier:   3E:CB:3D:77:B3:63:AE:0B:FE:79:E8:4A:37:7D:BA:A2:10:93:8F:86
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F432858479C1123E7EF0DD325C55BB140
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:23:e7:ef:0d:d3:25:c5:5b:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=e5ac666e-52fc-4cb9-97bf-d824ad120dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:04:93:4b:f9:8a:ea:cd:c5:d8:42:ac:c8:
                    73:9e:8b:00:0b:32:2b:76:74:62:f6:c9:5c:19:d2:
                    62:b0:32:cb:c3:73:c2:12:f8:d3:01:f0:33:fb:da:
                    b1:e6:61:42:17:f6:c5:3c:ad:21:2a:49:76:ca:2b:
                    b5:96:24:5e:d7:6d:e3:4c:10:e6:0f:61:1e:ba:82:
                    f2:1d:1b:e6:04:05:1e:a3:11:47:3d:b0:73:53:4a:
                    8f:d4:85:e5:18:7e:e5:16:75:c8:ec:96:ba:e2:f9:
                    9e:0b:a5:50:08:6d:89:d9:96:76:3b:04:3f:8e:47:
                    b2:4f:06:be:3b:42:d9:1d:2d:55:4f:fc:c4:75:24:
                    ba:bf:2b:57:02:06:08:f9:16:0a:cf:5d:e6:23:78:
                    10:ce:22:10:8b:57:46:93:ab:75:66:5b:50:9e:02:
                    35:76:4c:90:ad:37:e6:3f:db:69:59:28:a0:e1:06:
                    ce:62:4c:1c:9e:8e:f0:c2:ce:48:67:ab:a9:13:28:
                    af:3a:54:fd:b6:ab:40:b8:cf:b2:15:a6:57:af:f6:
                    b6:ef:56:3f:91:ac:d0:b2:5d:5f:cd:22:f8:1f:24:
                    59:f8:af:df:86:d8:8f:0d:1f:58:9f:14:27:af:51:
                    98:6c:df:cd:e0:9c:67:bd:6e:d2:64:13:63:58:71:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:3D:77:B3:63:AE:0B:FE:79:E8:4A:37:7D:BA:A2:10:93:8F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:12:9a:75:d0:d8:3e:78:1b:dc:3f:cb:2b:c6:ba:cb:98:
         99:55:d9:b8:c6:36:b7:ac:14:1a:5f:4d:fe:32:28:e2:86:f0:
         86:b1:30:12:d0:6f:60:92:6d:d7:86:e3:14:f2:30:26:fc:01:
         85:1b:fd:b1:db:39:5b:32:70:f9:22:72:60:17:33:22:5e:ea:
         56:d2:55:81:d4:ed:58:31:94:a1:0c:b7:29:a8:1b:87:12:b1:
         f5:e0:27:f8:52:21:66:f0:bc:fc:62:a1:f3:1a:4d:34:ec:d4:
         cf:dc:87:e7:62:5f:e7:02:c2:3c:84:72:d0:3e:c2:ff:28:31:
         f6:44:b8:9f:82:24:21:51:d8:b1:d5:24:e9:24:cf:65:67:ea:
         f7:06:03:d7:75:d4:9b:50:0d:d8:fe:58:84:21:a6:9c:18:b6:
         dc:bb:51:89:9b:74:f0:8c:3b:b8:de:18:24:a8:a0:62:42:84:
         69:e4:06:09:90:2f:af:e1:1b:77:c1:27:00:8b:01:7e:6c:d0:
         18:5a:2d:84:65:dd:74:83:a4:3f:2e:3a:56:ae:bb:96:58:d6:
         eb:54:c1:7e:52:e3:a0:bb:8e:1a:8c:d0:04:fd:d7:7f:dd:93:
         f7:ae:02:1c:ee:e7:77:85:0f:e8:f1:0c:79:f6:fa:4c:45:62:
         74:9b:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:40 2024 by rpki-client on console-fra.rpki-client.org